Spy

Win32/Spy.Guildma.CF information

Malware Removal

The Win32/Spy.Guildma.CF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Spy.Guildma.CF virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Spy.Guildma.CF?


File Info:

crc32: BF7B413B
md5: 561910949282c8889b007af9f9b260b3
name: 561910949282C8889B007AF9F9B260B3.mlw
sha1: dac54279aa31f74f395611de6e3c949469feb350
sha256: 94da63b00bed96332ea7e35183e88a323a4cfbf1ad94c0670cb8a4bd86033eb5
sha512: 5bdd28876f143634cb6b9def28da8bb143a409677c3c1fb82f42f1dd18a09337e2229227347697236839ed614a71eff3893598c9515059ef6ca03dce46519f45
ssdeep: 24576:ry//EmDVIspkzF5guN9cSQi/VqAlVH9DK9bzGF2Ki:rbk7kBKuN+SL/VJ9m9mLi
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Spy.Guildma.CF also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45106892
McAfeeArtemis!561910949282
CylanceUnsafe
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderTrojan.GenericKD.45106892
K7GWSpyware ( 005748c71 )
K7AntiVirusSpyware ( 005748c71 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Spy.Guildma.CF
TrendMicro-HouseCallTROJ_GEN.R002H0ALM20
ClamAVWin.Keylogger.Delf-7600475-0
KasperskyUDS:DangerousObject.Multi.Generic
RisingSpyware.Guildma!8.FBB0 (TFE:4:3PdvJpYyxF)
Ad-AwareTrojan.GenericKD.45106892
EmsisoftTrojan.GenericKD.45106892 (B)
F-SecureTrojan.TR/Hijacker.Gen
McAfee-GW-EditionBehavesLike.Win32.Injector.vh
FireEyeGeneric.mg.561910949282c888
SophosMal/Generic-S
IkarusTrojan-Spy.Agent
AviraTR/Hijacker.Gen
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Wacatac.D9!ml
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataTrojan.GenericKD.45106892
CynetMalicious (score: 100)
MAXmalware (ai score=81)
TencentWin32.Trojan.Hijacker.Stkj
SentinelOneStatic AI – Malicious PE
FortinetW32/Guildma.CC!tr.spy
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen
Qihoo-360Generic/HEUR/QVM25.0.168E.Malware.Gen

How to remove Win32/Spy.Guildma.CF?

Win32/Spy.Guildma.CF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment